Hermes support - #396

Merged

Pal Lakatos-Toth (pallakatos) merged 67 commits into

mainfrom

hermes/act1-docker-smoke-fixes

Jun 9, 2026

Commits on Jun 4, 2026

fix(hermes): A1 docker smoke fixes — version pin + plugin opt-in

authored and
Pal Lakatos-Toth
committed
e5cc28c
fix(hermes): A1.2 CRD schema + gitignore for cross-compile artifacts

Pal Lakatos
and
Copilot
committed
3812c14
fix(hermes): A1 e2e smoke — six bugs surfaced by kind cluster run

authored and
Pal Lakatos-Toth
committed
82b7fa1
fix(controller): always allow operator policy-echo ingress (NP)

Pal Lakatos
and
Copilot
committed
6aa2fb4
feat(e2e): add exec-brief-hermes-single scenario (Hermes Act 1)

Pal Lakatos
and
Copilot
committed
bb12435
fix(hermes): A1 e2e harness wiring — dev pull policy + Hermes posture hardening

authored and
Pal Lakatos-Toth
committed
493c118
fix(hermes): A1 e2e — Hermes runs the full exec-brief pipeline on real Foundry

authored and
Pal Lakatos-Toth
committed
f21048d
fix(router): operator-UX token + sandbox metrics for /v1/responses

Pal Lakatos
and
Copilot
committed
f4e42d6
feat(mesh): Hermes Act 2 — runtime-neutral Python AGT MeshClient + 6-tool deny list

Pal Allakatos
and
Copilot
committed
343eafa
feat(mesh): kars-agt-mesh Act 2.1 — full bidirectional E2E round-trip working

Pal Allakatos
and
Copilot
committed
5a372a4
feat(runtime-contract): lift env injection to be runtime-neutral + plug Hermes mesh egress-guard hole

Pal Allakatos
and
Copilot
committed
fdf7794
feat(mesh): Hermes Act 2.2 — multi-agent mesh end-to-end with kars_spawn

Pal Allakatos
and
Copilot
committed
16eed14
chore(harness): remove stray .new file from mesh-roundtrip-hermes

Pal Allakatos
and
Copilot
committed
42d00a6

Commits on Jun 5, 2026

feat(mesh): Hermes Act 2.3 — autonomous sub-agent auto-responder

Pal Allakatos
and
Copilot
committed
7730bd9
fix(hermes): pre_tool_call hook signature + heartbeat-vs-app metric breakdown

Pal Allakatos
and
Copilot
committed
100555e
feat(cli): wire kars connect for Hermes sandboxes

Pal Allakatos
and
Copilot
committed
c957e7a
feat(operator): Enter-key drops into Hermes agent TUI (full UX parity)

Pal Allakatos
and
Copilot
committed
2edc323
fix(mesh): align Python AGT MeshClient wire format with TS SDK (cross-runtime interop)

Pal Allakatos
and
Copilot
committed
1a6e7f4
feat(cli): include kars-runtime-hermes in 'kars push' image set

Pal Allakatos
and
Copilot
committed
1ebde5d
fix(mesh-plugin): emit modern did:mesh:<sha256[:32]> DID format

Pal Lakatos-Toth
and
Copilot
committed
19ec22c
build(agt): move AGT pin from pallakatos fork to upstream microsoft branch

Pal Lakatos-Toth
and
Copilot
committed
dd810e3
fix(agt-mesh-python): JSON-wrap payload to interop with TS SDK receiver

Pal Lakatos-Toth
and
Copilot
committed
0764dc8
fix(controller,hermes,agt-mesh-python): operator panel shows mesh peers on Hermes side

Pal Lakatos-Toth
and
Copilot
committed
8416c0a
fix(hermes): trust score at OpenClaw-convention baseline + bidi harness

Pal Lakatos-Toth
and
Copilot
committed
2d2131c
fix(hermes): Entra OAuth identity verification for operator-panel parity

Pal Lakatos-Toth
and
Copilot
committed
28704be
feat(aks): foundryRbac auto-grant + Entra-JWT WS connect + AKS test suite

Pal Lakatos-Toth
and
Copilot
committed
496cc92

Commits on Jun 6, 2026

feat(hermes): productize + document the Hermes runtime for out-of-the-box use

Pal Lakatos-Toth
and
Copilot
committed
09cdff3
fix(build): hermetic AGT wheel build (PEP 668) + Hermes in architecture + blueprints

Pal Lakatos-Toth
and
Copilot
committed
ac8dfed
test(hermes): aks_hermes_hermes_bidi.sh + matrix-symmetry proof

Pal Lakatos-Toth
and
Copilot
committed
7f783aa
fix(controller,cli,harness): unblock Hermes status emission + docker harness

Pal Lakatos-Toth
and
Copilot
committed
10de47b
docs(hermes): honest parity audit vs OpenClaw

Pal Lakatos-Toth
and
Copilot
committed
d68f4d8
feat(hermes): tool-surface parity with OpenClaw — 5 of 5 gaps closed

Pal Lakatos-Toth
and
Copilot
committed
808bcf7
fix(hermes): mesh_worker file_transfer save runs unconditionally
Pal Lakatos-Toth
committed
1b0f59d

Commits on Jun 7, 2026

ci(hermes): cargo fmt + LOC budget bumps for Hermes-support PR
Pal Lakatos-Toth
committed
e266812
ci: gate Hermes runtime + kars-agt-mesh pytest suites
Pal Lakatos-Toth
committed
1d06dcf
ci(hermes): expand coverage — ruff lint, hermes reconcile-E2E, interop README
Pal Lakatos-Toth
committed
77c9ec0

Commits on Jun 8, 2026

fix(cli): runLocalK8s auto-bootstraps AGT toolkit (fresh-machine OOTB)
Pal Lakatos-Toth
committed
8fa83bc
fix(sandbox-images): harden every external curl with retry+backoff
Pal Lakatos-Toth
committed
baeee5b
fix(router): Copilot IDE-JWT cache must respect expires_at, not just refresh_in
Pal Lakatos-Toth
committed
6886415
fix(cli,router): auto-emit Copilot fallback chain + visible "no chain" warn
Pal Lakatos-Toth
committed
6dca0f8
fix(router): cap forward-proxy upstream connect at 10s (was unbounded)
Pal Lakatos-Toth
committed
31cf2d4
ci: ignore RUSTSEC-2026-0173 (proc-macro-error2 unmaintained, build-time only)
Pal Lakatos-Toth
committed
76ed437
feat(cli,operator): Hermes in spawn picker + Hermes channels everywhere
Pal Lakatos-Toth
committed
e77e8f8
fix(cli): auto-load kars-runtime-hermes into kind + helpful build hint
Pal Lakatos-Toth
committed
ea59a9f
fix(cli): kars add surfaces stuck-container errors instead of lying
Pal Lakatos-Toth
committed
f39d425
fix(cli,operator): honest error reporting in kars add + operator spawn
Pal Lakatos-Toth
committed
ac28f29
fix(cli): kars add prints CRD-refresh hint on schema-mismatch rejection
Pal Lakatos-Toth
committed
93938f5
fix(cli): kars dev auto-builds kars-runtime-hermes image into kind
Pal Lakatos-Toth
committed
986c884
fix(cli): CRD-mismatch hint primary path = `kars dev`, not naked `helm template`
Pal Lakatos-Toth
committed
2c0c912
fix(helm): pin KARS_DEV_PROFILE=true in values-local-dev.yaml
Pal Lakatos-Toth
committed
99deca3
fix(cli): CRD-mismatch hint stops recommending naked `helm template | apply`
Pal Lakatos-Toth
committed
a5425fa
docs(proposal): kars-sre — built-in AKS SRE Hermes agent (design)
Pal Lakatos-Toth
committed
fbf48b5
fix(cli) + docs(sre): always rebuild controller+router + expand access-control section
Pal Lakatos-Toth
committed
da213a8
fix(hermes): entrypoint uses `cp -r` (not `cp -a`) for staged plugin copy
Pal Lakatos-Toth
committed
ca7ad67
fix(hermes): entrypoint config.yaml honors KARS_MODEL (was hardcoding gpt-5.4)
Pal Lakatos-Toth
committed
3d0f302
fix(router): accept `role` in SpawnRequest (was 422-ing valid Hermes spawns)
Pal Lakatos-Toth
committed
8eaee9e
ci(smoke): scripts/smoke/fresh-machine-ootb.sh + README
Pal Lakatos-Toth
committed
5853301
docs(showcase): kars showcase v1 — outline + 6 diagrams + 15-slide pitch deck
Pal Lakatos-Toth
committed
d721fe2
docs(showcase): fix slide 7 (KNOCK JSON overflow) + slide 11 (runtime tiles cropped)

Pal Lakatos-Toth
and
Copilot
committed
7a99b99
docs(showcase): commit deck builder + README

Pal Lakatos-Toth
and
Copilot
committed
ace04f4
docs(showcase): v2 deck — 21 slides, architecture deep-dive + outcome-shaped

Pal Lakatos-Toth
and
Copilot
committed
2971d3a
docs(showcase): v3 deck — high-level architecture diagram + network egress slide

Pal Lakatos-Toth
and
Copilot
committed
84907a8

Commits on Jun 9, 2026

ci: add MS+MIT copyright header to scripts/showcase/build-deck.js

Pal Lakatos-Toth
and
Copilot
committed
4b56560
docs(showcase): v4 deck — add live demo flow (Act I · intermission · Act II)

Pal Lakatos-Toth
and
Copilot
committed
650c097
docs(showcase): make Act II demo Kubernetes-native (ImagePullBackOff)

Pal Lakatos-Toth
and
Copilot
committed
23d0b60
docs(sre): production-grade addendum — slicing, threat model, privilege containment

Pal Lakatos-Toth
and
Copilot
committed
876527c
docs(sre): mesh disabled at the source — SRE agent is not on the mesh at all

Pal Lakatos-Toth
and
Copilot
committed
41dc5d8